Release 0.1.12 [skip ci]

Signed-off-by: RenovateBot <renovatebot@w9r.dev>

.forgejo/workflows/release.yaml

@@ -1,107 +1,27 @@
 ---
 name: release
-
 on:
   push:
     branches:
       - main
-
 jobs:
   release:
     name: Release
     runs-on: ubuntu-latest
     if: ${{ !startsWith(github.event.head_commit.message, 'Release') }}
+    env:
+      JRELEASER_OUTPUT_DIRECTORY: target
 
     steps:
-      - name: Checkout
-        uses: actions/checkout@v4
+      - name: "Initialize Environment"
+        id: initialize
+        uses: https://w9r.dev/w9r.dev/action-setup-environment@v1.1.4
         with:
-          fetch-depth: 0
+          roleid: ${{ secrets.VAULT_ROLE_ID }}
+          secretid: ${{ secrets.VAULT_SECRET_ID }}
 
-      - name: Set up Environment
-        run: |
-          apt update
-          apt install -y zip
-          mkdir -p /root/.jreleaser
-          mkdir -p /root/.m2
-          touch /root/.jreleaser/config.properties
-
-      - name: maven-settings-xml-action
-        uses: https://github.com/whelk-io/maven-settings-xml-action@v22
-        with:
-          repositories: >
-            [
-              {
-                "id": "maven-releases",
-                "name": "Releases",
-                "url": "https://nexus.w9r.dev/repository/maven-releases",
-                "releases": {
-                  "enabled": "true",
-                  "updatePolicy": "always",
-                  "checksumPolicy": "warn"
-                },
-                "snapshots": {
-                  "enabled": "false",
-                  "updatePolicy": "always",
-                  "checksumPolicy": "fail"
-                }
-              },
-              {
-                "id": "maven-snapshots",
-                "name": "Snapshots",
-                "url": "https://nexus.w9r.dev/repository/maven-snapshots",
-                "releases": {
-                  "enabled": "false",
-                  "updatePolicy": "always",
-                  "checksumPolicy": "warn"
-                },
-                "snapshots": {
-                  "enabled": "true",
-                  "updatePolicy": "always",
-                  "checksumPolicy": "warn"
-                }
-              }
-            ]
-          servers: >
-            [
-              {
-                "id": "maven-group",
-                "username": "${{ secrets.NEXUS_USERNAME }}",
-                "password": "${{ secrets.NEXUS_PASSWORD }}"
-              },
-              {
-                "id": "maven-snapshots",
-                "username": "${{ secrets.NEXUS_USERNAME }}",
-                "password": "${{ secrets.NEXUS_PASSWORD }}"
-              },
-              {
-                "id": "maven-releases",
-                "username": "${{ secrets.NEXUS_USERNAME }}",
-                "password": "${{ secrets.NEXUS_PASSWORD }}"
-              },
-              {
-                "id": "vulnz",
-                "username": "${{ secrets.VULNZ_USERNAME }}",
-                "password": "${{ secrets.VULNZ_PASSWORD }}"
-              }
-            ]
-          mirrors: >
-            [
-              {
-                "id": "maven-group",
-                "name": "central",
-                "mirrorOf": "*",
-                "url": "https://nexus.w9r.dev/repository/maven-group/"
-              }
-            ]
-          plugin_groups: >
-            [
-              "org.sonarsource.scanner.maven"
-            ]
-          output_file: /root/.m2/settings.xml
-
-      - name: Determine next version
-        uses: https://github.com/obfu5c8/action-svu@v1
+      - name: "Determine next version"
+        uses: https://github.com/obfu5c8/action-svu@e0ac511a90318bc284bf845936acd5c5c077d788 # v1
         id: generate_next_version
         with:
           type: auto
@@ -113,122 +33,57 @@ jobs:
           prefix: ''
           suffix: ''
 
-      - name: Install syft
-        uses: https://github.com/anchore/sbom-action/download-syft@v0
-        id: install_syft
-        with:
-          syft-version: v1.18.1
-
-      - name: Set new version
+      - name: "Set new version"
         run: |
           NEW_VERSION=${{steps.generate_next_version.outputs.version}}
           echo NEW_VERSION=$NEW_VERSION >> "$GITHUB_ENV"
+          echo JRELEASER_PROJECT_VERSION=$NEW_VERSION >> "$GITHUB_ENV"
           echo "New version: $NEW_VERSION"
+          mvn -B --file pom.xml versions:set -DnewVersion=$NEW_VERSION
 
-      - name: Cache Java and Maven software
-        uses: https://github.com/actions/cache@v4
-        with:
-          path: ~/.sdkman
-          key: ${{ runner.os }}-sdkman-${{ hashFiles('**/.sdkmanrc') }}
-          restore-keys: |
-            ${{ runner.os }}-sdkman-
-        env:
-          ACTIONS_STEP_DEBUG: true
-
-      - name: Cache local Maven repository
-        uses: https://github.com/actions/cache@v4
-        with:
-          path: ~/.m2/repository
-          key: ${{ runner.os }}-maven-${{ hashFiles('**/pom.xml') }}
-          restore-keys: |
-            ${{ runner.os }}-maven-
-        env:
-          ACTIONS_STEP_DEBUG: true
-
-      - name: Install Java & Maven
-        uses: https://github.com/sdkman/sdkman-action@main
-        id: sdkman
-
-      - name: Set Version
-        env:
-          MAVEN_USERNAME: ${{ secrets.NEXUS_USERNAME }}
-          MAVEN_CENTRAL_TOKEN: ${{ secrets.NEXUS_PASSWORD }}
-          MAVEN_GPG_PASSPHRASE: ${{ secrets.GPG_PASSPHRASE }}
-        run: |
-          export GPG_TTY=$(tty)
-          git config user.name "${{ github.event.head_commit.committer.name }}"
-          git config user.email "${{ github.event.head_commit.committer.email }}"
-          mvn -B --file pom.xml versions:set -DnewVersion=${{ env.NEW_VERSION }}
-
-      - name: Run JReleaser (Changelog)
-        uses: https://w9r.dev/actions/release-action@main
+      - name: "Run JReleaser (Changelog)"
+        uses: https://github.com/jreleaser/release-action@f69e545b05f149483cecb2fb81866247992694b8 # 2.4.2
         with:
           arguments: changelog --debug
           setup-java: false
         continue-on-error: true
-        env:
-          JRELEASER_OUTPUT_DIRECTORY: target
-          JRELEASER_PROJECT_VERSION: ${{ env.NEW_VERSION }}
-          JRELEASER_GITEA_TOKEN: ${{ secrets.JRELEASER_GITEA_TOKEN }}
-          JRELEASER_GPG_PASSPHRASE: ${{ secrets.GPG_PASSPHRASE }}
-          JRELEASER_GPG_PUBLIC_KEY: ${{ secrets.GPG_PUBLIC_KEY }}
-          JRELEASER_GPG_SECRET_KEY: ${{ secrets.GPG_PRIVATE_KEY }}
 
-      - name: Commit and push changes
-        run: |
-          git config user.name "${{ github.event.head_commit.committer.name }}"
-          git config user.email "${{ github.event.head_commit.committer.email }}"
-          git add pom.xml CHANGELOG.md
-          git commit -a -m "Release ${{ env.NEW_VERSION }}"
-          git push
+      - name: "Commit and push changes"
+        uses: https://w9r.dev/w9r.dev/action-git-commit-push@v1.4
+        with:
+          email: ${{ steps.initialize.outputs.gitemail }}
+          name: ${{ steps.initialize.outputs.gituser }}
+          commit_message: "Release ${{ env.JRELEASER_PROJECT_VERSION }} [skip ci]"
+          files: pom.xml CHANGELOG.md
+          access_token: ${{ env.JRELEASER_GITEA_TOKEN }}
+
       - name: Build package and populate staging area for deployment
         run: |
-          mvn -B --file pom.xml package
-          mvn --file pom.xml -Ppublication
+          mvn -B --file pom.xml -P skipShadeAndCycloneDX,publication deploy
 
-
-      - name: Run JReleaser (Assemble)
-        uses: https://w9r.dev/actions/release-action@main
+      - name: "Run JReleaser (Assemble)"
+        uses: https://github.com/jreleaser/release-action@f69e545b05f149483cecb2fb81866247992694b8 # 2.4.2
         with:
           arguments: assemble --debug
           setup-java: false
         continue-on-error: true
-        env:
-          JRELEASER_OUTPUT_DIRECTORY: target
-          JRELEASER_PROJECT_VERSION: ${{ env.NEW_VERSION }}
-          JRELEASER_GITEA_TOKEN: ${{ secrets.JRELEASER_GITEA_TOKEN }}
-          JRELEASER_GPG_PASSPHRASE: ${{ secrets.GPG_PASSPHRASE }}
-          JRELEASER_GPG_PUBLIC_KEY: ${{ secrets.GPG_PUBLIC_KEY }}
-          JRELEASER_GPG_SECRET_KEY: ${{ secrets.GPG_PRIVATE_KEY }}
 
-      - name: Run JReleaser (Release)
-        uses: https://w9r.dev/actions/release-action@main
+      - name: "Run JReleaser (Release)"
+        uses: https://github.com/jreleaser/release-action@f69e545b05f149483cecb2fb81866247992694b8 # 2.4.2
         with:
           arguments: release --debug
           setup-java: false
-        env:
-          JRELEASER_OUTPUT_DIRECTORY: target
-          JRELEASER_PROJECT_VERSION: ${{ env.NEW_VERSION }}
-          JRELEASER_GITEA_TOKEN: ${{ secrets.JRELEASER_GITEA_TOKEN }}
-          JRELEASER_GPG_PASSPHRASE: ${{ secrets.GPG_PASSPHRASE }}
-          JRELEASER_GPG_PUBLIC_KEY: ${{ secrets.GPG_PUBLIC_KEY }}
-          JRELEASER_GPG_SECRET_KEY: ${{ secrets.GPG_PRIVATE_KEY }}
-          JRELEASER_ARTIFACTORY_USERNAME: ${{ secrets.NEXUS_USERNAME }}
-          JRELEASER_ARTIFACTORY_TOKEN: ${{ secrets.NEXUS_PASSWORD }}
-
-
-      # Persist logs
 
       - name: JReleaser release trace
         if: always()
-        uses: https://gitea.com/actions/upload-artifact@v3
+        uses: https://gitea.com/actions/upload-artifact@ff15f0306b3f739f7b6fd43fb5d26cd321bd4de5 # v3
         with:
           name: jreleaser-trace
           path: target/jreleaser/trace.log
 
       - name: JReleaser release properties
         if: always()
-        uses: https://gitea.com/actions/upload-artifact@v3
+        uses: https://gitea.com/actions/upload-artifact@ff15f0306b3f739f7b6fd43fb5d26cd321bd4de5 # v3
         with:
           name: jreleaser-properties
           path: target/jreleaser/output.properties

.forgejo/workflows/sonarqube.yaml

@@ -5,140 +5,26 @@ on:
       - main
   pull_request:
     types: [opened, synchronize, reopened]
+  workflow_dispatch:
 
 name: SonarQube Scan
 jobs:
   sonarqube:
-    name: SonarQube Trigger
+    name: "SonarQube Trigger"
     runs-on: ubuntu-latest
     steps:
-      - name: Checking out
-        uses: actions/checkout@v4
+      - name: "Initialize Environment"
+        uses: https://w9r.dev/w9r.dev/action-setup-environment@v1.1.4
         with:
-          fetch-depth: 0
-      - name: Set up Environment
-        run: |
-          apt update
-          apt install -y zip
-          mkdir -p /root/.jreleaser
-          mkdir -p /root/.m2
-          touch /root/.jreleaser/config.properties
+          roleid: "${{ secrets.VAULT_ROLE_ID }}"
+          secretid: "${{ secrets.VAULT_SECRET_ID }}"
 
-      - name: Install syft
-        uses: https://github.com/anchore/sbom-action/download-syft@v0
-        id: install_syft
-        with:
-          syft-version: v1.18.1
-
-      - name: maven-settings-xml-action
-        uses: https://github.com/whelk-io/maven-settings-xml-action@v22
-        with:
-          repositories: >
-            [
-              {
-                "id": "maven-releases",
-                "name": "Releases",
-                "url": "https://nexus.w9r.dev/repository/maven-releases",
-                "releases": {
-                  "enabled": "true",
-                  "updatePolicy": "always",
-                  "checksumPolicy": "warn"
-                },
-                "snapshots": {
-                  "enabled": "false",
-                  "updatePolicy": "always",
-                  "checksumPolicy": "fail"
-                }
-              },
-              {
-                "id": "maven-snapshots",
-                "name": "Snapshots",
-                "url": "https://nexus.w9r.dev/repository/maven-snapshots",
-                "releases": {
-                  "enabled": "false",
-                  "updatePolicy": "always",
-                  "checksumPolicy": "warn"
-                },
-                "snapshots": {
-                  "enabled": "true",
-                  "updatePolicy": "always",
-                  "checksumPolicy": "warn"
-                }
-              }
-            ]
-          servers: >
-            [
-              {
-                "id": "maven-group",
-                "username": "${{ secrets.NEXUS_USERNAME }}",
-                "password": "${{ secrets.NEXUS_PASSWORD }}"
-              },
-              {
-                "id": "maven-snapshots",
-                "username": "${{ secrets.NEXUS_USERNAME }}",
-                "password": "${{ secrets.NEXUS_PASSWORD }}"
-              },
-              {
-                "id": "maven-releases",
-                "username": "${{ secrets.NEXUS_USERNAME }}",
-                "password": "${{ secrets.NEXUS_PASSWORD }}"
-              },
-              {
-                "id": "vulnz",
-                "username": "${{ secrets.VULNZ_USERNAME }}",
-                "password": "${{ secrets.VULNZ_PASSWORD }}"
-              }
-            ]
-          mirrors: >
-            [
-              {
-                "id": "maven-group",
-                "name": "central",
-                "mirrorOf": "*",
-                "url": "https://nexus.w9r.dev/repository/maven-group/"
-              }
-            ]
-          plugin_groups: >
-            [
-              "org.sonarsource.scanner.maven"
-            ]
-          output_file: /root/.m2/settings.xml
-
-      - name: Cache Java and Maven software
-        uses: https://github.com/actions/cache@v4
-        with:
-          path: ~/.sdkman
-          key: ${{ runner.os }}-sdkman-${{ hashFiles('**/.sdkmanrc') }}
-          restore-keys: |
-            ${{ runner.os }}-sdkman-
-        env:
-          ACTIONS_STEP_DEBUG: true
-
-      - name: Cache SonarQube packages
-        uses: https://github.com/actions/cache@v4
+      - name: "Cache SonarQube packages"
+        uses: https://github.com/actions/cache@1bd1e32a3bdc45362d1e726936510720a7c30a57 # v4
         with:
           path: ~/.sonar/cache
-          key: ${{ runner.os }}-sonar
-          restore-keys: ${{ runner.os }}-sonar
+          key: "${{ runner.os }}-sonar"
+          restore-keys: "${{ runner.os }}-sonar"
 
-      - name: Cache local Maven repository
-        uses: https://github.com/actions/cache@v4
-        with:
-          path: ~/.m2/repository
-          key: ${{ runner.os }}-maven-${{ hashFiles('**/pom.xml') }}
-          restore-keys: |
-            ${{ runner.os }}-maven-
-        env:
-          ACTIONS_STEP_DEBUG: true
-
-      - name: Install Java & Maven
-        uses: https://github.com/sdkman/sdkman-action@main
-        id: sdkman
-
-      - name: SonarQube Scan
-        env:
-          SONAR_TOKEN: ${{ secrets.SONARQUBE_TOKEN }}
-          SONAR_HOST_URL: ${{ vars.SONARQUBE_HOST }}
-        run: >
-          mvn -B verify org.sonarsource.scanner.maven:sonar-maven-plugin:sonar
-          -Dsonar.qualitygate.wait=true
+      - name: "SonarQube Scan"
+        run: "mvn -B verify org.sonarsource.scanner.maven:sonar-maven-plugin:sonar"

CHANGELOG.md

@@ -1,3 +1,54 @@
+## [0.1.12]
+### 🧰 Tasks
+- [fc209e8](https://w9r.dev/pom/spring-boot-starter/commits/fc209e8) **deps**: update all non-major dependencies
+
+## [0.1.11]
+### 🧰 Tasks
+- [7989bf0](https://w9r.dev/pom/spring-boot-starter/commits/7989bf0) **deps**: update dependency org.owasp:dependency-check-maven to v12
+
+## [0.1.10]
+### 🐛 Fixes
+- [e269770](https://w9r.dev/pom/spring-boot-starter/commits/e269770) **deps**: update dependency dev.w9r.pom:dependencies to v0.1.13
+
+## [0.1.9]
+### 🛠  Build
+- [a004117](https://w9r.dev/pom/spring-boot-starter/commits/a004117) only one maven run for build and deploy
+
+## [0.1.8]
+### 🛠  Build
+- [24ea986](https://w9r.dev/pom/spring-boot-starter/commits/24ea986) do not run shade and cyclonedx on this pom
+
+## [0.1.7]
+### 🐛 Fixes
+- [fcb1b92](https://w9r.dev/pom/spring-boot-starter/commits/fcb1b92) **deps**: update all non-major dependencies
+
+---
+- [c9add44](https://w9r.dev/pom/spring-boot-starter/commits/c9add44) revert 16d3b08ef162154a523d0538c5230155fc166b8f
+
+## [0.1.6]
+### 🧰 Tasks
+- [f6281a9](https://w9r.dev/pom/spring-boot-starter/commits/f6281a9) **deps**: update dependency org.apache.maven.plugins:maven-deploy-plugin to v3.1.3
+
+## [0.1.5]
+### 🧰 Tasks
+- [16d3b08](https://w9r.dev/pom/spring-boot-starter/commits/16d3b08) **deps**: update https://gitea.com/actions/upload-artifact action to v4
+
+## [0.1.4]
+### 🧰 Tasks
+- [8e0ff3c](https://w9r.dev/pom/spring-boot-starter/commits/8e0ff3c) **deps**: pin dependencies
+
+## [0.1.3]
+### 🧰 Tasks
+- [7e93471](https://w9r.dev/pom/spring-boot-starter/commits/7e93471) switch to mainstream release action
+
+## [0.1.2]
+### 🧰 Tasks
+- [b5e07ab](https://w9r.dev/pom/spring-boot-starter/commits/b5e07ab) **deps**: add renovate.json
+
+## [0.1.1]
+### 🧰 Tasks
+- [8a6ffe2](https://w9r.dev/pom/spring-boot-starter/commits/8a6ffe2) simplify workflows
+
 ## [0.1.0]
 ### 🚀 Features
 - [0fc45c3](https://w9r.dev/pom/spring-boot-starter/commits/0fc45c3) create correct release

pom.xml

@@ -4,7 +4,7 @@
     <modelVersion>4.0.0</modelVersion>
     <groupId>dev.w9r.pom</groupId>
     <artifactId>spring-boot-starter</artifactId>
-    <version>0.1.0</version>
+    <version>0.1.12</version>
     <packaging>pom</packaging>
     <name>spring-boot-starter</name>
     <description>A POM consisting of general dependencies and build settings</description>
@@ -45,15 +45,15 @@
         <spring-cloud.version>2024.0.0</spring-cloud.version>
 
         <plugin.maven-compiler.version>3.13.0</plugin.maven-compiler.version>
-        <plugin.maven-deploy.version>3.1.2</plugin.maven-deploy.version>
+        <plugin.maven-deploy.version>3.1.3</plugin.maven-deploy.version>
         <cyclonedx-maven-plugin.version>2.9.1</cyclonedx-maven-plugin.version>
         <plugin.sonar.version>5.0.0.4389</plugin.sonar.version>
         <plugin.jacoco.version>0.8.12</plugin.jacoco.version>
-        <checkstyle.version>10.17.0</checkstyle.version>
+        <checkstyle.version>10.21.1</checkstyle.version>
         <plugin.checkstyle.version>3.6.0</plugin.checkstyle.version>
-        <plugin.dependency-check.version>11.1.1</plugin.dependency-check.version>
+        <plugin.dependency-check.version>12.0.1</plugin.dependency-check.version>
         <plugin.spotbugs.version>4.8.6.6</plugin.spotbugs.version>
-        <spotbugs.version>4.8.6</spotbugs.version>
+        <spotbugs.version>4.9.0</spotbugs.version>
         <findsecbugs.version>1.13.0</findsecbugs.version>
     </properties>
     <distributionManagement>
@@ -89,7 +89,7 @@
             <dependency>
                 <groupId>dev.w9r.pom</groupId>
                 <artifactId>dependencies</artifactId>
-                <version>0.1.0</version>
+                <version>0.1.13</version>
                 <type>pom</type>
                 <scope>import</scope>
             </dependency>
@@ -113,7 +113,7 @@
         <dependency>
             <groupId>dev.w9r.pom</groupId>
             <artifactId>dependencies</artifactId>
-            <version>0.1.0</version>
+            <version>0.1.13</version>
             <type>pom</type>
         </dependency>
         <dependency>
@@ -161,7 +161,7 @@
         <dependency>
             <groupId>com.github.loki4j</groupId>
             <artifactId>loki-logback-appender</artifactId>
-            <version>1.4.0</version>
+            <version>1.6.0</version>
         </dependency>
     </dependencies>
 
@@ -219,7 +219,7 @@
             <plugin>
                 <groupId>org.apache.maven.plugins</groupId>
                 <artifactId>maven-compiler-plugin</artifactId>
-                <version>3.11.0</version>
+                <version>3.13.0</version>
                 <configuration>
                     <parameters>true</parameters>
                 </configuration>
@@ -227,7 +227,7 @@
             <plugin>
                 <groupId>org.apache.maven.plugins</groupId>
                 <artifactId>maven-failsafe-plugin</artifactId>
-                <version>3.0.0</version>
+                <version>3.5.2</version>
                 <executions>
                     <execution>
                         <goals>
@@ -243,7 +243,7 @@
             <plugin>
                 <groupId>org.apache.maven.plugins</groupId>
                 <artifactId>maven-jar-plugin</artifactId>
-                <version>3.3.0</version>
+                <version>3.4.2</version>
                 <configuration>
                     <archive>
                         <manifest>
@@ -256,7 +256,7 @@
             <plugin>
                 <groupId>org.apache.maven.plugins</groupId>
                 <artifactId>maven-war-plugin</artifactId>
-                <version>3.3.2</version>
+                <version>3.4.0</version>
                 <configuration>
                     <archive>
                         <manifest>
@@ -281,13 +281,13 @@
             <plugin>
                 <groupId>org.graalvm.buildtools</groupId>
                 <artifactId>native-maven-plugin</artifactId>
-                <version>0.9.22</version>
+                <version>0.10.4</version>
                 <extensions>true</extensions>
             </plugin>
             <plugin>
                 <groupId>io.github.git-commit-id</groupId>
                 <artifactId>git-commit-id-maven-plugin</artifactId>
-                <version>9.0.0</version>
+                <version>9.0.1</version>
                 <executions>
                     <execution>
                         <goals>

renovate.json

@@ -0,0 +1,6 @@
+{
+  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
+  "extends": [
+    "local>w9r.dev/renovate-config"
+  ]
+}